The databases are not yet being encrypted, so use the encrypt/decrypt logic to hide the contents of all databases. Specific tables like vault may not be encrypt-able since the information is needed for encryption process.
Move sensitive data to encrypted tables if needed.